Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3138342e302f32342d3234203d3e20313338383830.roa
File:                     3130332e3134302e3138342e302f32342d3234203d3e20313338383830.roa (raw, json)
Hash identifier:          116JZmxzcAVG9AgvJWLkmbkrJFWn+o6CxzmBti36PF4=
Subject key identifier:   EC:E1:B5:38:34:2C:B2:A6:FF:B3:EE:CE:0B:CD:15:C8:87:D7:8B:31
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4F896DFC94D1F5D6FD51AE24DFB1ECBF018D38E9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3138342e302f32342d3234203d3e20313338383830.roa
Signing time:             Fri 19 Nov 2021 05:00:00 +0000
ROA not before:           Fri 19 Nov 2021 04:55:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     138880
IP address blocks:        103.140.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:89:6d:fc:94:d1:f5:d6:fd:51:ae:24:df:b1:ec:bf:01:8d:38:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 19 04:55:00 2021 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:8b:ba:52:2d:78:4c:ab:00:9b:64:96:d0:
                    18:c1:a8:71:2a:d9:43:cb:54:ab:0b:b1:4a:f3:77:
                    9e:43:e8:4e:3c:8f:39:64:67:a5:08:1f:3c:46:f6:
                    19:db:4f:fa:06:55:64:9b:88:0c:1a:ff:d6:35:fa:
                    43:fc:aa:2d:96:17:29:4c:81:59:ee:59:e2:23:dd:
                    ff:c7:11:93:03:c2:e6:0b:e7:3f:a7:0e:4e:ef:31:
                    a7:5a:30:b8:28:80:aa:79:4d:ec:7d:3a:89:1e:97:
                    ff:c9:22:2a:bc:9b:bb:d2:1b:ec:d6:44:bf:7a:fa:
                    c6:6e:48:70:6e:c0:73:08:52:70:a0:94:b5:45:7b:
                    2c:68:17:0b:86:f5:d2:35:c2:a1:4b:20:91:b9:1d:
                    e9:84:e8:11:2b:60:9c:f3:9c:a4:1c:67:f9:5c:55:
                    02:a4:28:95:f9:b6:82:c2:99:66:3e:8f:77:db:f7:
                    1b:5f:23:15:0e:75:4a:fd:6a:fd:02:d6:c1:4d:03:
                    67:ca:48:1d:a6:ec:9a:50:0e:14:71:ee:9c:19:8c:
                    59:e7:5f:fe:fe:10:e2:ed:14:4e:97:79:8c:8b:fa:
                    c9:72:8b:4d:42:ac:7f:fa:1b:ad:77:4c:44:e3:c8:
                    2a:e9:3f:b1:99:b4:5d:a1:0b:81:45:d6:cd:4e:f8:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E1:B5:38:34:2C:B2:A6:FF:B3:EE:CE:0B:CD:15:C8:87:D7:8B:31
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134302e3138342e302f32342d3234203d3e20313338383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:7e:db:28:b7:f6:64:33:64:5f:03:43:ac:d5:5b:af:0c:
         40:ce:2a:85:05:8a:6a:63:42:fe:a1:0f:b0:9b:ff:09:aa:e5:
         e9:17:2f:69:bc:39:23:25:bd:42:22:22:7b:3e:a1:20:c1:d0:
         57:37:58:52:12:fa:2c:13:45:6b:4e:e0:96:69:6b:5b:0b:bc:
         30:61:5c:41:51:37:bd:19:1c:d1:f2:8e:57:66:61:be:cb:74:
         ce:2f:c7:de:35:13:a5:4a:2c:ca:c4:ca:3e:18:4b:34:0f:35:
         3e:5d:66:51:ad:a9:5f:33:3f:85:4c:7a:5c:09:ad:fa:7f:ff:
         98:97:63:76:7b:9f:20:59:d8:59:c4:41:45:b8:74:07:57:02:
         30:c6:87:d8:bf:78:9f:60:f2:04:fd:f1:6b:ee:20:a1:1b:f8:
         80:7f:8e:72:af:87:20:d7:70:91:48:3c:67:52:ef:f2:cc:26:
         28:f0:74:86:88:03:bd:94:7f:05:37:7f:07:4b:68:47:47:5e:
         36:f7:e2:83:be:3a:27:58:af:d2:20:6f:f4:cc:76:c7:3e:2b:
         3b:aa:9f:8a:e1:dc:ba:b3:69:7f:6e:a3:0a:67:17:05:e1:b7:
         e6:3e:0b:1f:b0:37:ac:2b:5f:c7:27:f5:df:86:d8:d5:b7:e2:
         a6:ab:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----